Extracted

• • Target
    crt.exe
  • Size 5.1MB
  • SHA256 6185fdacf0b903ea8bb2eee380a0c60e314ad7da93c7833b188c796f3f97b5be
  • MD5 101f00585e773ec198e3e0721f0d582d
  • SHA1 c1ca25c1f6e709f61596d2be1843a629b171dd59
  • SHA512 15c06517403fd1d492b40f3c8a60c392dc6a6087e8b9610e022906b977dc45b9087ed3e7b2091ff8522b766c9f441da2797bb70fb7942400f699a9717402c556
  • SSDEEP 98304:mkwXtlj7PeddJb7xJvyRgG6P7rTpc91us3KLCZTf9X8oK878t:2Laddz1ymG6P7rtcCSKLCZD93C
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  socks5systemzbotnetdiscovery

  • Detect Socks5Systemz Payload

  • Socks5Systemz

    Socks5Systemz is a botnet written in C++.

    botnetsocks5systemz

  • Executes dropped EXE

  • Loads dropped DLL

  • Unexpected DNS network traffic destination

    Network traffic to other servers than the configured DNS servers was detected on the DNS port.

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  behavioral1behavioral2behavioral3behavioral4